Permissions Policy x402 REST
Paid Permissions-Policy header audit (browser feature gating, high-risk feature detection, source allowlist) via x402
1,930 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid Permissions-Policy header audit (browser feature gating, high-risk feature detection, source allowlist) via x402
Paid meta-refresh + JS-redirect detector (cycle 92 gating fix)
Paid WCAG-light accessibility audit (html lang, alt-text coverage, label/aria-label on inputs, ARIA roles, table th scope, button accessible name, tabindex, autocomplete + A-F grade) via x402
Paid Set-Cookie security-attribute audit (per-cookie Secure/HttpOnly/SameSite/Max-Age/Size/Priority/Partitioned + issue flags + A-F grade) via x402
Paid comprehensive favicon + app-icon extractor (link rel=icon/apple-touch-icon/mask-icon, manifest.json icons, msapplication-TileImage, og:image, Twitter image) via x402
Paid hreflang + x-default multilingual SEO audit (cycle 92 gating fix)
Paid full llms.txt + llms-full.txt fetcher with parsed section breakdown (H1 title, per-section URL + bullet count) for AI-agent context loading via x402
Paid microdata + RDFa structured data extraction (cycle 92 gating fix)
Paid outbound link/redirect health audit (dead-link probe, redirect chain depth, mixed-content detection, broken in-page anchors, invalid mailto, A-F grade) via x402
Paid multi-signal page-type classifier (URL/title/JSON-LD/OG/microdata/forms/structure -> primary category + confidence + secondary + A-F grade) via x402
Paid privacy-signal detection audit — DNT/GPC/AI-opt-out meta tags, JS-side navigator.doNotTrack + globalPrivacyControl + Sec-GPC detection, privacy-policy link check, A-F grade via x402
Paid content-freshness detector (publish/modified dates from meta/JSON-LD/HTTP headers/time elements, age in days, A-F grade) via x402
Paid third-party embed/iframe/object inventory — YouTube/Vimeo/Wistia/GoogleMaps/Stripe/Calendly/Typeform/Spotify/Soundcloud/Twitch/Figma/Canva/Loom/Twitter/IG/CodePen/JSFiddle/CodeSandbox/Replit/SlideShare/SpeakerDeck/I...
Paid top anchor-text frequencies + internal/external classification + nofollow/sponsored/ugc counts + empty-anchor + generic anchor-text detection, A-F grade via x402
Paid composite email-auth deliverability score (SPF + DKIM + DMARC + MTA-STS + BIMI rollup, A-F grade, post-Feb-2024 Gmail/Yahoo bulk-sender compliance check) via x402
Paid page render-mode + hydration-profile detector — Next/Nuxt/Remix/Astro/SvelteKit/React/Vue/Angular framework hints + body word count + hidden DOM % + noscript fallback + window.* hydration data keys + verdict string...
Paid external-resource inventory (script/stylesheet/font/image/iframe hosts, top domains, 22-family ad/tracker classifier, third-party dependency A-F grade) via x402
Paid <img>/<picture>/<source>/<svg>/<canvas>/<video> inventory with first/third-party classification, lazy-loading adoption, modern format hints, missing-alt audit, A-F grade via x402
Paid unified structured-data audit — JSON-LD + Microdata + RDFa aggregated into unique schema.org types + parent-class hierarchy + 21 rich-result candidate detection + machine_readability_score 0-100 with A-F grade via x...
Paid legal/ethical disclosure completeness audit — Terms/Privacy/Cookie/Affiliate/AI-policy links + FTC affiliate language detection + EU AI Act Art. 50 AI-disclosure detection + CCPA 'Do Not Sell' link + gdpr_legal_comp...
Paid Schema.org JSON-LD validator + recommended-properties audit (30-type catalog with required/recommended property checks, type-specific anti-pattern detection, ISO 8601 / ISO 4217 / phone-format checks, weighted requi...
Paid domain contactability audit — email/phone/physical-address/contact-page/social-profile/live-chat/contact-form detection with contactability_score 0-100 A-F grade via x402
Paid institutional trust-anchor audit (beyond EEAT) — legal entity suffix + regulatory mentions (SEC/FINRA/HIPAA/GDPR/SOC2/etc) + jurisdictional signals + 11 trust seals + copyright + legal pages + trust_anchors_score 0-...
Paid server/fingerprint/debug/cache response-header audit — Server + X-Powered-By info-leak detection, framework-version-disclosed (X-AspNet-Version/X-Generator/X-Drupal-Cache), debug-headers-in-prod (X-Debug/X-Runtime),...